<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: video station</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-44084: An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station</title><link>https://patchthecve.com/cve/CVE-2026-44084.html</link><guid>https://patchthecve.com/cve/CVE-2026-44084.html</guid><pubDate>Fri, 16 Oct 2026 17:10:32 +0000</pubDate><description>HIGH 7.5: An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow remote attackers to obtain sensitive data.

We have already fixed the vulnerability in the following version:
Video Station 5.8.8 and later</description></item><item><title>CVE-2026-34015: A path traversal vulnerability has been reported to affect Video Station</title><link>https://patchthecve.com/cve/CVE-2026-34015.html</link><guid>https://patchthecve.com/cve/CVE-2026-34015.html</guid><pubDate>Fri, 16 Oct 2026 17:12:15 +0000</pubDate><description>MEDIUM 6.5: A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.

We have already fixed the vulnerability in the following version:
Video Station 5.8.8</description></item><item><title>CVE-2026-26245: A SQL injection vulnerability has been reported to affect Video Station</title><link>https://patchthecve.com/cve/CVE-2026-26245.html</link><guid>https://patchthecve.com/cve/CVE-2026-26245.html</guid><pubDate>Fri, 16 Oct 2026 17:12:51 +0000</pubDate><description>HIGH 8.8: A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands.

We have already fixed the vulnerability in the following version:
Video Station 5.8.8 and later</description></item><item><title>CVE-2026-26244: A SQL injection vulnerability has been reported to affect Video Station</title><link>https://patchthecve.com/cve/CVE-2026-26244.html</link><guid>https://patchthecve.com/cve/CVE-2026-26244.html</guid><pubDate>Fri, 16 Oct 2026 17:13:24 +0000</pubDate><description>HIGH 8.8: A SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands.

We have already fixed the vulnerability in the following version:
Video Station 5.8.8 and later</description></item><item><title>CVE-2025-66275: A path traversal vulnerability has been reported to affect Video Station</title><link>https://patchthecve.com/cve/CVE-2025-66275.html</link><guid>https://patchthecve.com/cve/CVE-2025-66275.html</guid><pubDate>Mon, 19 Oct 2026 22:10:00 +0000</pubDate><description>MEDIUM 6.5: A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.

We have already fixed the vulnerability in the following version:
Video Station 5.8.5</description></item><item><title>CVE-2025-66272: A path traversal vulnerability has been reported to affect Video Station</title><link>https://patchthecve.com/cve/CVE-2025-66272.html</link><guid>https://patchthecve.com/cve/CVE-2025-66272.html</guid><pubDate>Mon, 19 Oct 2026 22:10:00 +0000</pubDate><description>MEDIUM 6.5: A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.

We have already fixed the vulnerability in the following version:
Video Station 5.8.5</description></item></channel></rss>